Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: g0yvz+cIMzYSwvRLRfvX3AOjZXDn+MGGAgPSRWm8liw=
Subject key identifier: 4B:1E:09:60:E4:CD:B4:D3:78:69:DF:81:14:DC:74:15:46:4E:AD:5F
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019CABD8E5468A60AF656FEC6F27340160BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: VIszVSNh4vnmrEH4nJSjrTHyWWfy6iHU0o2/BuWaNvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e5:46:8a:60:af:65:6f:ec:6f:27:34:01:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=4b1e0960e4cdb4d37869df8114dc7415464ead5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:55:6c:06:01:eb:ad:9b:9b:87:7a:3c:cb:
2e:c6:8e:f4:7f:24:1e:7b:8a:80:f1:3c:11:0d:fe:
48:d3:18:75:d2:08:94:b8:1f:95:8a:aa:6b:50:99:
5c:f4:63:6c:80:35:58:c2:b6:b7:18:04:b5:df:08:
87:7c:1a:6f:d7:b4:51:e5:da:e9:c3:06:98:f2:58:
fd:1f:d5:1b:01:b9:c3:32:d9:d0:15:2d:f9:b1:28:
55:0c:9f:65:eb:e2:52:4b:34:09:e6:6d:b8:4c:0d:
e0:69:ff:c3:f6:ef:ce:f1:38:96:e6:ab:a2:b6:97:
83:e6:7c:af:37:ea:7e:35:a2:e3:a1:5a:bc:1c:94:
13:dc:de:58:f7:ca:e0:22:3e:1b:e1:e5:5b:8e:fa:
9c:cc:5d:36:eb:9a:06:ed:69:f7:44:17:0b:43:a0:
6a:75:3f:3f:3b:b3:19:eb:92:86:21:d0:3b:55:8a:
e7:3a:41:a3:9b:7c:4f:5c:db:b0:82:9c:97:d9:31:
de:20:65:c5:56:6b:0d:32:20:4b:e2:25:5c:d8:68:
5e:35:7e:cc:32:7b:6e:72:cc:e3:4b:ed:0a:cc:13:
55:cc:6f:ee:f7:af:7c:0d:11:2d:04:cf:ed:70:06:
0d:44:98:03:4d:cf:37:e6:cd:c8:3e:4a:03:1e:94:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1E:09:60:E4:CD:B4:D3:78:69:DF:81:14:DC:74:15:46:4E:AD:5F
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:51:55:20:a9:ce:9a:88:70:5c:5b:d7:a0:39:81:4a:81:
05:5e:fc:74:88:bb:5b:20:46:38:64:4f:f8:b2:b6:a3:69:21:
f0:c8:67:82:32:0d:30:89:c9:df:b1:bb:d8:16:c0:05:f3:95:
3e:c4:8b:fc:3c:74:57:ee:fb:9f:1a:27:ad:49:15:4d:9a:aa:
1f:a4:4c:d8:52:84:71:34:51:fc:79:0b:85:0b:2c:a3:f8:1a:
94:b3:98:80:95:2c:89:19:83:2e:f7:e6:71:9d:fa:04:3a:fa:
5a:f3:64:c1:6a:8c:23:36:c7:2c:f7:4f:be:25:5d:79:d8:ee:
7a:fd:21:d9:4b:24:da:39:6f:9b:03:43:ae:e0:5d:00:ef:ad:
44:60:fd:a5:93:6d:5d:03:c6:54:e6:fd:fd:2b:a0:44:c1:64:
d6:84:bc:b4:c7:58:11:2d:d1:13:19:1f:30:32:bc:8a:5b:d7:
a6:f8:90:c5:33:42:96:81:c8:54:47:9f:cb:ee:b6:b7:f4:82:
31:41:1f:5c:b5:45:97:4f:93:01:fe:33:67:dd:4a:0e:c1:58:
4e:0e:25:18:8e:3f:9b:61:cd:bc:cf:e6:00:b0:03:15:18:06:
9a:f0:5e:cb:cd:cf:09:f8:85:e7:6d:4e:90:1f:52:63:92:64:
35:a5:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:12 2026 by rpki-client